How to create a firewall summary report

[Ram1]

Create a Firewall Summary Report that has Inbound Allow, Inbound Deny Traffic? 

[richgalloway]

Presuming your firewall is logging allow and deny events to Splunk and presuming those events are stored in the 'network' index and also presuming those events have an 'action' field saying whether the traffic was allowed or blocked then this may get you started

index=network
| stats count by action